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Re: H. Carson Smith, IV, P.C. - Incident Notification 

Dear Sir or Madam: 

McDonald Hopkins PLC represents H. Carson Smith, IV, P.C. I am writing to provide 
notification of an incident at H. Carson Smith, IV, P.C. that may affect the security of personal 
information of two (2) Connecticut residents. H. Carson Smith, IV, P.C.’s investigation is 
ongoing and this notification will be supplemented with any new or significant facts or findings 
subsequent to this submission, if any. By providing this notice, H. Carson Smith, IV, P.C. does 
not waive any rights or defenses regarding the applicability of Connecticut law or personal 
jurisdiction. 

H. Carson Smith, IV, P.C. recently learned that on October 2, 2018, an unauthorized 
individual may have obtained access to a firm email account. H. Carson Smith, IV, P.C. 
immediately launched an investigation in consultation with outside cybersecurity professionals 
who regularly investigate and analyze these types of situations to analyze the extent of any 
compromise of the email account and the security of the emails and attachments contained within 
it. 


H. Carson Smith, IV, P.C. devoted considerable time and effort to determine what 
information was contained in the affected email account. Based on its comprehensive 
investigation and document review, which concluded on March 6, 2019, H. Carson Smith, IV, 
P.C. discovered that the compromised email account contained a limited amount of the affected 
residents’ personal information, including their full names, Social Security numbers, and bank 
account information. 

To date, H. Carson Smith, IV, P.C. is not aware of any reports of identity fraud or 
improper use of any information as a direct result of this incident. Nevertheless, out of an 
abundance of caution, H. Carson Smith, IV, P.C. wanted to make you (and the affected residents) 
aware of the incident and explain the steps that it is taking to help safeguard the affected 
residents against identity fraud. H. Carson Smith, IV, P.C. is providing the affected residents 


rsnosuss- t 


Chicago | Cleveland | Columbus | Detroit | Miami | West Palm Beach 

www.mcdonaldhopkins.com 




State of Connecticut 
Office of the Attorney General 
April 10, 2019 
Page 2 

with written notification of this incident commencing on April 10, 2019 in substantially the same 
form as the letter attached hereto. H. Carson Smith, IV, P.C. is offering the affected residents a 
complimentary two-year membership with a credit monitoring service. H. Carson Smith, IV, 
P.C. is advising the affected residents to contact their financial institutions to inquire about steps 
to take to protect their accounts. H. Carson Smith, IV, P.C. is advising the affected residents 
about the process for placing a fraud alert and/or security freeze on their credit files and 
obtaining free credit reports. The affected residents are also being provided with the contact 
information for the consumer reporting agencies and the Federal Trade Commission. 

At H. Carson Smith, IV, P.C., protecting the privacy of personal information is a top 
priority. H. Carson Smith, IV, P.C. is committed to maintaining the privacy of personal 
information in its possession and has taken many precautions to safeguard it. H. Carson Smith, 
IV, P.C. continually evaluates and modifies its practices and internal controls to enhance the 
security and privacy of personal information. 

Should you have any questions regarding this notification, please contact me at (248) 
220-1354 orjgiszczak@mcdonaldhopkins.com. Thank you for your cooperation. 


Sincerely, 



James J. Giszczak 


Enel. 
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H. CARSON SMITH, IV, P.C. 

ATTORNEY AT LAW 
4474 COMMERCE DRIVE, SUITE B 
BUFORD, GA 30518 
P.O. BOX 606, BUFORD, GA 30515 

IMPOR TANT INFORMATION 



Dear 



I am writing with important information regarding a recent security incident. The privacy and security of the personal 
information we maintain is of the utmost importance to H. Carson Smith, IV, P.C. We wanted to provide you with 
information about the incident, explain the services we are making available to you, and let you know that we 
continue to take significant measures to protect your information. 

We recently learned that on October 2, 2018, an unauthorized individual may have obtained access to a firm email 
account. We immediately launched an investigation in consultation with outside cybersecurity professionals who 
regularly investigate and analyze these types of situations to analyze the extent of any compromise of the email 
account and the security of the emails and attachments contained within it. 

We devoted considerable time and effort to determine what information was contained in the affected email account. 
Based on our comprehensive investigation and document review, which concluded on March 6, 2019, we discovered 
that the compromised email account contained your full name, Social Security number, and bank account information. 

To date, we are not aware of any reports of identity fraud or improper use of your information as a direct result of 
this incident. Out of an abundance of caution, we wanted to make you aware of the incident, explain the services we 
are making available to help safeguard you against identity fraud, and suggest steps that you should take as well. To 
protect you from potential misuse of your information, we are offering you a two-year membership in myTrueldentity 
provided by TransUnion Interactive, a subsidiary of TransUnion. For more information on identity theft prevention 
and myTrueldentity, including instructions on how to activate your two-year membership, please see the additional 
information provided in this letter. 

This letter also provides other precautionary measures you can take to protect your personal information, including 
placing a Fraud Alert and/or Security Freeze on your credit files, and/or obtaining a free credit report. Because your 
bank account information was impacted, we recommend that you contact your financial institution to inquire about 
steps to take to protect your account, including whether you should close your account or obtain a new account 
number. Additionally, you should always remain vigilant in reviewing your financial account statements and credit 
reports for fraudulent or irregular activity on a regular basis. 

Please accept our apologies that this incident occurred. We are committed to maintaining the privacy of personal 
information in our possession and have taken many precautions to safeguard it. We continually evaluate and modify 
our practices and internal controls to enhance the security and privacy of your personal information. 

If you have any further questions regarding this incident, pleas^ainmyledicated and confidential toll-free 
response line that we have set up to respond to questions This response line is staffed with 

professionals familiar with this incident and knowledgeable on wna^or^aiHlo to protect against misuse of your 
information. The response line is available Monday through Friday, 8:00 AM to 8:00 PM CST. 


Sincerely, 



H. Carson Smith, IV 
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- OTHER IMPORTANT INFORMATION - 


1. Enrolling in Complimentary 24-Month Credit Monitoring . 

As a safeguard, we have arranged for you to enroll, at no cost to you, in an online credit monitoring service 
(myTrueldentity) for two years provided by TransUnion Interactive, a subsidiary of TransUnion®, one of the three 
nationwide credit reporting companies. 

To enroll in this service, go to the myTrueldentity website at www.mytrueidentit^onyn^^he space referenced as 

I I 

steps to receive your credit monitoring service online within minutes. 

You can sign up for the online credit monitoring service anytime between now and 

Due to privacy laws, we cannot register you directly. Please note that credit monitoring semc^mgnuioffi^vailaDle 
for individuals who do not have a credit file with TransUnion, or an address in the United States (or its territories) and 
a valid Social Security number. Enrolling in this service will not affect your credit score. 

Once you are enrolled, you will be able to obtain two years of unlimited access to your TransUnion credit report and 
credit score. The daily credit monitoring service will notify you if there are any critical changes to your credit file 
at TransUnion, including fraud alerts, new inquiries, new accounts, new public records, late payments, change of 
address and more. The service also includes access to an identity restoration program that provides assistance in the 
event your identity is compromised to help you restore your identity and up to $1,000,000 in identity theft insurance 
with no deductible. (Policy limitations and exclusions may apply.) 

If you believe you ma^b^^victim of identity theft, please call the toll-free TransUnion Fraud Response 
Semce^hotlin^a^^^^^H^^H. When prompted, enter the following 6-digit telephone pass code 

A 1 

2. Placing a Fraud Alert on Your Credit File . 

Whether or not you choose to use the complimentary 24-month credit monitoring services, we recommend that you 
place an initial 90-day “Fraud Alert” on your credit files, at no charge. A fraud alert tells creditors to contact you 
personally before they open any new accounts. To place a fraud alert, call any one of the three major credit bureaus 
at the numbers listed below. As soon as one credit bureau confirms your fraud alert, they will notify the others. 


Equifax 

P.O. Box 105069 
Atlanta, GA 30348 
www. equifax. com 
1-800-525-6285 


Experian 

P.O. Box 2002 
Allen, TX 75013 
www. experian. com 
1-888-397-3742 


TransUnion LLC 

P.O. Box 2000 
Chester, PA 19016 
www.transunion.com 
1-800-680-7289 


3. Consider Placing a Security Freeze on Your Credit File . 

If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security Freeze” 
be placed on your credit file, at no charge. A security freeze prohibits, with certain specific exceptions, the consumer 
reporting agencies from releasing your credit report or any information from it without your express authorization. 
You may place a security freeze on your credit report by contacting all three nationwide credit reporting companies at 
the numbers below and following the stated directions or by sending a request in writing, by mail, to all three credit 
reporting companies: 


Equifax Security Freeze 

PO Box 105788 
Atlanta, GA 30348 
https://www.freeze.equifax.com 
1-800-349-9960 


Experian Security Freeze 

PO Box 9554 
Allen, TX 75013 
http://experian.com/freeze 
1-888-397-3742 


TransUnion Security Freeze 

P.O. Box 2000 
Chester, PA 19016 

http ://www. transunion, com/ securityfreeze 
1-888-909-8872 


In order to place the security freeze, you’ll need to supply your name, address, date of birth, Social Security number 
and other personal information. After receiving your freeze request, each credit reporting company will send you a 
confirmation letter containing a unique PIN (personal identification number) or password. Keep the PIN or password 
in a safe place. You will need it if you choose to lift the freeze. 

If your personal information has been used to file a false tax return, to open an account or to attempt to open an 
account in your name or to commit fraud or other crimes against you, you may file a police report in the city in which 
you currently reside. 
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If you do place a security freeze prior to enrolling in the credit monitoring service as described above, you will need 
to remove the freeze in order to sign up for the credit monitoring service. After you sign up for the credit monitoring 
service, you may refreeze your credit file. 

4. Obtaining a Free Credit Report . 

Under federal law, you are entitled to one free credit report every 12 months from each of the above three 
major nationwide credit reporting companies. Call 1-877-322-8228 or request your free credit reports online at 
www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies. Identify any 
accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is correct. If 
you have questions or notice incorrect information, contact the credit reporting company. 

5. Additional Helpful Resources . 

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission (FTC) 
recommends that you check your credit reports periodically. Checking your credit report periodically can help you 
spot problems and address them quickly. 

If you find suspicious activity on your credit reports or have reason to believe your information is being misused, call 
your local law enforcement agency and file a police report. Be sure to obtain a copy of the police report, as many 
creditors will want the information it contains to absolve you of the fraudulent debts. You may also file a complaint 
with the FTC by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877-IDTHEFT (1-877-438-4338), 
or by mail at Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue NW, Washington, 
DC 20580. Your complaint will be added to the FTC’s Identity Theft Data Clearinghouse, where it will be accessible 
to law enforcement for their investigations. In addition, you may obtain information from the FTC about fraud alerts 
and security freezes. 
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